$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa File: 59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa (raw, json) Hash identifier: 1xcUpvLkITOggOZLS008syENSdbW0+8q3LmHlp2SDbM= Subject key identifier: CA:E8:85:F9:98:36:7C:D0:25:A5:E2:1F:AC:FE:33:73:32:5B:B9:26 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA4BEBF3F08D1C495140 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:4b:eb:f3:f0:8d:1c:49:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=2076ec7f-fca5-40cc-a31b-fd0fa26c8bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:f7:e6:ff:b6:ad:4e:6e:ae:64:3c:fc:e8: ff:72:d5:8b:50:8f:4f:c4:e4:2b:7e:fd:27:c3:47: 36:2b:21:44:84:6e:6c:aa:7e:ae:65:f9:a1:4e:fe: dc:cd:d8:6c:95:8a:e2:61:ee:56:6f:b7:d0:15:a9: c6:6b:ca:54:5c:ef:80:d9:e6:88:ef:c2:ec:fc:d8: 13:e7:6a:e2:14:0e:79:8f:41:6c:36:ba:18:e2:37: ff:2b:a9:cf:31:f4:17:58:65:ad:d2:a9:81:da:8e: 55:85:b9:52:08:78:32:04:85:96:9d:15:c0:7c:d9: 96:f5:35:4d:13:7d:0e:0c:5e:da:63:8e:81:12:d1: dd:be:9d:a5:3d:d4:9d:ef:43:74:6c:38:29:27:4c: e2:fb:06:4e:51:f2:b9:a5:f4:f4:17:43:7f:cf:39: 97:58:f2:30:2a:21:ae:d6:82:17:f1:4c:bc:47:fe: 4d:00:17:1b:62:a8:18:e3:a7:4a:e8:11:1f:d9:3b: c5:7c:b4:ff:1b:ad:af:4f:e2:c1:4d:da:3b:66:ae: 94:0b:35:2f:c7:13:ac:bd:63:3e:bd:23:80:f8:47: cf:34:5a:90:85:b4:06:bc:0f:05:25:1c:58:b7:e3: a1:89:6b:3e:af:9b:49:8a:44:26:dd:ea:e2:d3:7c: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:85:F9:98:36:7C:D0:25:A5:E2:1F:AC:FE:33:73:32:5B:B9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2e:07:10:a8:0f:17:8c:72:f5:49:af:e4:5e:e7:9a:af:4f: 69:23:54:cf:b2:d6:6d:10:97:0f:9c:fc:50:b3:b3:2c:62:c7: 8b:b1:bf:61:25:f5:38:1d:14:fd:5a:e6:86:4f:99:23:7f:63: a1:a8:00:bf:25:bf:13:2c:07:c2:28:d5:16:85:5a:3a:44:b9: fe:4f:79:41:4f:59:d1:91:f9:b7:c6:07:67:cb:dd:30:e2:2e: fe:e0:5f:4c:09:15:a5:f2:cf:ab:67:1a:bd:61:aa:66:64:30: 04:fa:09:4d:d4:08:ca:08:e3:9d:99:c3:1f:24:ec:b8:78:8c: f9:9b:40:b0:8f:a4:f4:79:2e:a7:2a:db:19:44:87:2b:b8:05: d2:92:f4:1f:f8:dd:b0:94:28:63:e1:0e:55:83:53:d3:dd:95: ec:11:45:fd:39:0d:47:15:32:bf:b5:ad:5f:03:9b:65:1d:18: 11:42:7b:d4:39:98:5f:ba:98:ab:a6:35:dc:f9:d9:1c:e7:4e: 76:29:d8:64:97:1a:a0:a7:b4:d8:d9:70:b1:91:a9:48:54:b3: f1:bc:36:6f:19:5a:ef:34:c1:d7:77:cf:ad:db:58:bb:02:81: 7c:59:e3:91:dd:19:58:be:cc:48:f4:22:fa:aa:79:93:ee:2b: d6:78:10:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VupL6/PwjRxJUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MjA3NmVjN2YtZmNhNS00MGNjLWEzMWItZmQwZmEyNmM4YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYn35v+2rU5urmQ8/Oj/ctWLUI9PxOQrfv0n w0c2KyFEhG5sqn6uZfmhTv7czdhslYriYe5Wb7fQFanGa8pUXO+A2eaI78Ls/NgT 52riFA55j0FsNroY4jf/K6nPMfQXWGWt0qmB2o5VhblSCHgyBIWWnRXAfNmW9TVN E30ODF7aY46BEtHdvp2lPdSd70N0bDgpJ0zi+wZOUfK5pfT0F0N/zzmXWPIwKiGu 1oIX8Uy8R/5NABcbYqgY46dK6BEf2TvFfLT/G62vT+LBTdo7Zq6UCzUvxxOsvWM+ vSOA+EfPNFqQhbQGvA8FJRxYt+OhiWs+r5tJikQm3eri03yt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrohfmYNnzQJaXiH6z+M3MyW7kmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTllZGRkN2MtNjU3YS0z Y2MwLTg1YmYtM2MxNTJiZTZiNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQuBxCoDxeMcvVJr+Re55qvT2kjVM+y1m0Qlw+c/FCzsyxix4uxv2El 9TgdFP1a5oZPmSN/Y6GoAL8lvxMsB8Io1RaFWjpEuf5PeUFPWdGR+bfGB2fL3TDi Lv7gX0wJFaXyz6tnGr1hqmZkMAT6CU3UCMoI452Zwx8k7Lh4jPmbQLCPpPR5Lqcq 2xlEhyu4BdKS9B/43bCUKGPhDlWDU9PdlewRRf05DUcVMr+1rV8Dm2UdGBFCe9Q5 mF+6mKumNdz52RznTnYp2GSXGqCntNjZcLGRqUhUs/G8Nm8ZWu80wdd3z63bWLsC gXxZ45HdGVi+zEj0IvqqeZPuK9Z4EJg= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:40 2025 by rpki-client